940198871/Vulnerability-details

Releases0

Vulnerability details

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-24215 ↗	Feb 8, 2024Thursday, 8 February 2024, 19:15	5.3 MEDIUM	—
An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request.
CVE-2024-24213 ↗	Feb 8, 2024Thursday, 8 February 2024, 18:15	9.8 CRITICAL	—
Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component /pg_meta/default/query. NOTE: the vendor's position is that this is an intended feature; also, it exists in the Supabase dashboard product, not the Supabase PostgreSQL product. Specifically, /pg_meta/default/query is for SQL queries that are entered in an intended UI by an authorized user. Nothing is injected.
CVE-2023-50639 ↗	Dec 20, 2023Wednesday, 20 December 2023, 21:15	5.4 MEDIUM	—
Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page.